Can a 30-person company show investors it monitors for intrusions?
Yes, without a security team. Investors want to see that monitoring exists, that someone receives the alerts and that decisions are recorded. A company of 30 people can do this with one sensor: a NetSenX agent on a switch's mirror port (SPANSPAN: switch port analyser. A switch setting that sends a copy of network traffic to one port, where a sensor can watch it.) or on a network TAPTAP: test access point. A small device that copies the traffic on a network cable for a sensor to watch. watches the traffic of a whole segment and counts as one device. Alerts arrive by e-mail on every plan, each explained in plain language, so an office manager or an outside IT provider can read and act on them. Write a one-page description of what is monitored and who responds, and attach a PDF report from the Starter plan. Be clear about limits: a network sensor does not replace endpoint protection, backups or multi-factor authentication, which investors usually ask about as well.
General information, not legal advice. National laws can add to the EU texts quoted here, for example deadlines, forms or reporting channels: check your own country's rules.
Read next
Related questions
- How should we answer a customer who asks whether we have had a security incident?
- Is it better to disclose past security incidents to customers?
- What records do we need to answer questions about past incidents?
- What should the board know about the cost of IT downtime?
- What questions should the board ask the IT manager about security?
Terms used here
- SPAN (switch port analyser)
- A switch setting that sends a copy of network traffic to one port, where a sensor can watch it.
- TAP (test access point)
- A small device that copies the traffic on a network cable for a sensor to watch.